$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa File: c1b8872b-1a15-34f9-9440-873b89151612.roa (raw, json) Hash identifier: Jx2UztP7cTfAl/J2hqCPQyp32fsi0pIQjUTYL1RL1Ec= Subject key identifier: 24:F1:49:EC:4C:46:D0:51:8F:66:0E:79:0B:F7:42:8E:36:B0:38:0D Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584EB2B1A3A0620C2F40046F4D80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 125 IP address blocks: 199.64.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a3:a0:62:0c:2f:40:04:6f:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=9294e785-662c-42bb-88a2-7bf2f82a0be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:26:50:a9:2f:5c:ed:fd:87:fb:f2:16:9e: 60:53:a3:54:1d:fa:7e:3f:3a:9a:aa:72:a6:13:f5: 09:4b:a7:84:b2:54:e9:18:36:85:a3:af:08:6c:25: 3e:9d:04:dc:61:e2:48:a0:22:8f:9a:29:a6:72:bd: e9:f9:69:07:d7:4c:77:fe:80:6c:c5:75:33:2b:b0: 9e:7c:13:ab:31:bf:a6:2a:4b:bc:8b:cc:d9:6e:3c: 59:15:a1:3f:b8:14:8b:94:f5:19:c0:3a:a0:7f:ed: b2:e7:71:ae:8d:b2:43:ee:be:8b:7a:89:87:47:b8: 29:af:94:84:4e:d4:c3:b4:ba:e5:43:74:9c:77:9d: d1:33:59:a0:08:87:b4:0f:a5:f2:3b:08:0d:c4:2f: 72:27:50:65:03:6c:fc:8f:1d:c4:72:6f:ab:bc:69: 09:24:a8:b9:68:15:9a:4b:50:8b:1f:24:b0:d0:fa: bb:2c:f1:c7:62:0d:9f:6a:60:70:29:72:6f:54:7a: 50:b5:32:6e:89:57:78:7b:a9:b0:cf:8d:ae:74:f4: af:28:41:38:02:45:a5:23:e3:ff:da:8a:c9:6c:ae: 19:8d:4a:83:c6:58:c9:80:3b:ee:d8:f6:be:e1:dc: c7:f0:de:92:da:01:22:28:d8:be:e0:cf:b3:98:e6: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F1:49:EC:4C:46:D0:51:8F:66:0E:79:0B:F7:42:8E:36:B0:38:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:94:61:5c:40:11:6d:d5:02:82:a0:8f:09:9c:de:22:94:89: 8e:ee:f3:c3:0d:bf:f4:27:06:73:c8:8a:08:fe:b4:0a:f0:5b: 40:47:6a:1d:74:44:89:71:70:ca:95:a2:28:57:4a:8a:9f:ad: f5:23:b0:87:34:87:ea:b7:ab:e2:ef:85:89:99:eb:83:48:de: 65:ea:8f:8b:8a:3d:dc:10:7b:34:57:b4:8f:96:e6:48:c5:76: 77:37:65:49:dd:6d:6a:f0:06:5f:ba:9f:75:6b:7a:f8:b0:2b: 93:7b:6f:da:2e:39:9d:d6:3d:ad:32:ab:5a:40:fb:94:33:67: d4:d8:ee:31:79:90:39:d3:ad:3d:26:2d:37:4a:14:68:07:a1: bf:fd:85:57:4b:c7:27:b6:8c:6b:7a:e9:35:84:59:6e:01:55: 00:ff:a5:ca:c5:e1:3d:4e:79:ed:86:b0:33:bf:21:0f:d9:3a: 86:e4:25:7d:98:e8:ec:64:1e:50:d3:36:5b:b8:a4:17:88:12: e8:d2:7c:05:14:dd:e8:da:3d:31:62:77:e2:36:93:29:bf:a3: e9:98:eb:d9:39:57:0c:7a:7e:96:eb:8c:f3:96:33:64:cd:c4: ca:39:9f:0e:80:37:7c:41:a2:ee:d8:58:03:27:3c:30:d6:4a: 1a:00:0d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaOgYgwvQARvTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OTI5NGU3ODUtNjYyYy00MmJiLTg4YTItN2JmMmY4MmEwYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvomUKkvXO39h/vyFp5gU6NUHfp+PzqaqnKm E/UJS6eEslTpGDaFo68IbCU+nQTcYeJIoCKPmimmcr3p+WkH10x3/oBsxXUzK7Ce fBOrMb+mKku8i8zZbjxZFaE/uBSLlPUZwDqgf+2y53GujbJD7r6LeomHR7gpr5SE TtTDtLrlQ3Scd53RM1mgCIe0D6XyOwgNxC9yJ1BlA2z8jx3Ecm+rvGkJJKi5aBWa S1CLHySw0Pq7LPHHYg2famBwKXJvVHpQtTJuiVd4e6mwz42udPSvKEE4AkWlI+P/ 2orJbK4ZjUqDxljJgDvu2Pa+4dzH8N6S2gEiKNi+4M+zmOZ1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTxSexMRtBRj2YOeQv3Qo42sDgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvYzFiODg3MmItMWExNS0z NGY5LTk0NDAtODczYjg5MTUxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmUYVxAEW3VAoKgjwmc3iKUiY7u88MNv/QnBnPIigj+tArwW0BHah10 RIlxcMqVoihXSoqfrfUjsIc0h+q3q+LvhYmZ64NI3mXqj4uKPdwQezRXtI+W5kjF dnc3ZUndbWrwBl+6n3VreviwK5N7b9ouOZ3WPa0yq1pA+5QzZ9TY7jF5kDnTrT0m LTdKFGgHob/9hVdLxye2jGt66TWEWW4BVQD/pcrF4T1Oee2GsDO/IQ/ZOobkJX2Y 6OxkHlDTNlu4pBeIEujSfAUU3ejaPTFid+I2kym/o+mY69k5Vwx6fpbrjPOWM2TN xMo5nw6AN3xBou7YWAMnPDDWShoADR0= -----END CERTIFICATE-----Generated at Sat Aug 15 04:40:49 2026 by rpki-client